Kontron AT8902 Full Size CLI - Manual (Page 72)

AT8901/2/3
AT8901/2/3 CLI Reference Manual Page 2 - 38
of authentication login methods is three. The possible method values are
local,
radius
and
reject
.
The value of local indicates that the user’s locally stored ID and password are used for
authentication. The value of radius indicates that the user’s ID and password will be
authenticated using the RADIUS server. The value of
reject
indicates the user is
never authenticated.
To authenticate a user, the first authentication method in the user’s login
(authentication login list) is attempted. FASTPATH software does not utilize multiple
entries in the user’s login. If the first entry returns a timeout, the user authentication
attempt fails.
NOTE: The default login list included with the default configuration can not
be changed.
Format
authentication login [ [
[]]]
Mode Global Config
2.10.1.1 no authentication login
This command deletes the specified authentication login list. The attempt to delete fails
if any of the following conditions are true:
• The login list name is invalid or does not match an existing authentication login list
• The specified authentication login list is assigned to any user or to the non config-
ured user for any component
• The login list is the default login list included with the default configuration and
was not created using ‘authentication login’. The default login list cannot be
deleted.
Format
no authentication login
Mode Global Config
2.10.2 clear dot1x statistics
This command resets the 802.1x statistics for the specified port or for all ports.
Format clear dot1x statistics {< slot/port > | all}
Mode Privileged EXEC
2.10.3 clear radius statistics
This command is used to clear all RADIUS statistics.
Format
clear radius statistics
Mode Privileged EXEC
2.10.4 dot1x defaultlogin
This command assigns the authentication login list to use for non-configured users for
802.1x port security. This setting is over-ridden by the authentication login list